|
ru.unix.bsd
- RU.UNIX.BSD ------------------------------------------------------------------
From : Eduard V. Goroshko 2:5020/400 25 Nov 2002 17:45:26
To : Valentin Nechayev
Subject : Re: FreeBSD Upgrade trouble
--------------------------------------------------------------------------------
"Valentin Nechayev" <netch@segfault.kiev.ua> сообщил/сообщила в новостях
следующее: news:20021123194633.GE466@iv.nn.kiev.ua...
> Давай ты приведешь полный вывод команд:
> ifconfig -au
[root@gw] ~# ifconfig -au
rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet 192.168.0.254 netmask 0xffffff00 broadcast 192.168.0.255
inet 192.168.1.254 netmask 0xffffff00 broadcast 192.168.1.255
ether 00:e0:7d:96:11:92
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
ed0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet 213.33.248.2 netmask 0xfffffff8 broadcast 213.33.248.7
ether 00:50:bf:5e:88:ec
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
inet 127.0.0.1 netmask 0xff000000
ppp0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1500
inet 195.242.23.43 --> 193.124.80.141 netmask 0xffffff00
rl0 - приватные сети
ed0 - провайдер #1
ppp0 - провайдер #2
> netstat -rn
Routing tables
Internet:
Destination Gateway Flags Refs Use Netif Expire
default 213.33.248.1 UGc 18 29459 ed0
192.168.0 link#1 UC 6 0 rl0
192.168.0.1 00:03:47:3f:be:1c UHLW 2 19425 rl0 734
192.168.0.90 00:02:b3:49:f1:67 UHLW 5 89897 rl0 702
192.168.0.91 00:e0:7d:a3:69:66 UHLW 0 5942 rl0 1176
[...skip private network...]
192.168.0.255 ff:ff:ff:ff:ff:ff UHLWb 1 2062 rl0
192.168.1 link#1 UC 50 0 rl0
192.168.1.1 00:03:47:3f:be:1c UHLW 0 85 rl0 1186
[...skip another private network...]
192.168.1.225 00:60:97:e0:fc:e2 UHLW 0 2200 rl0 921
192.168.1.254 00:e0:7d:96:11:92 UHLW 0 9 lo0
192.168.1.255 ff:ff:ff:ff:ff:ff UHLWb 2 2062 rl0
193.124.80.141 195.242.23.43 UH 9 0 ppp0
195.242.0/16 193.124.80.141 UGc 0 6 ppp0
195.242.2.4 193.124.80.141 UGHS 1 3227 ppp0
195.242.2.80 193.124.80.141 UGHS 0 72 ppp0
195.242.2.122 193.124.80.141 UGH 0 5206 ppp0
195.242.13.11 193.124.80.141 UGHS 0 0 ppp0
195.242.23.22 193.124.80.141 UGHS 0 0 ppp0
195.242.23.101 193.124.80.141 UGHS 0 0 ppp0
195.242.23.129 193.124.80.141 UGHS 0 2 ppp0
195.242.23.150 193.124.80.141 UGHS 0 85 ppp0
213.33.248/29 link#2 UC 1 0 ed0
213.33.248.1 00:04:c1:2e:14:e0 UHLW 16 0 ed0 1092
> netstat -in
[root@gw] ~# netstat -in
Name Mtu Network Address Ipkts Ierrs Opkts Oerrs
Coll
rl0 1500 <Link#1> 00:e0:7d:96:11:92 2696865 0 1457680 0
0
rl0 1500 192.168.0 192.168.0.254 891503 -
2991 - -
rl0 1500 192.168.1 192.168.1.254 309956 -
4132 - -
ed0 1500 <Link#2> 00:50:bf:5e:88:ec 581004 0 708515 0
2663
ed0 1500 213.33.248/29 213.33.248.2 574299 -
5183 - -
lp0* 1500 <Link#3> 0 0 0 0
0
lo0 16384 <Link#4> 149945 0 149945 0
0
lo0 16384 127 127.0.0.1 24 -
24 - -
ppp0 1500 <Link#5> 166339 22 175305 0
0
ppp0 1500 195.242.23 195.242.23.43 9241 -
8694 - -
> ipfw list
00100 allow ip from any to any via lo0
00150 allow ip from 127.0.0.0/8 to 127.0.0.0/8
00200 deny log logamount 300 ip from any to 127.0.0.0/8
00300 deny log logamount 300 ip from 127.0.0.0/8 to any
00400 deny ip from 192.168.0.0/16 to any in recv ppp0
00500 deny ip from 192.168.0.0/16 to any in recv ed0
00600 deny ip from 195.242.23.43 to any in recv rl0
00700 deny ip from 213.33.248.0/29 to any in recv rl0
00800 deny ip from any to 10.0.0.0/8 via ppp0
00900 deny ip from any to 10.0.0.0/8 via ed0
01000 deny ip from any to 172.16.0.0/12 via ppp0
01100 deny ip from any to 172.16.0.0/12 via ed0
01200 deny ip from any to 192.168.0.0/16 via ppp0
01300 deny ip from any to 192.168.0.0/16 via ed0
01400 deny ip from any to 0.0.0.0/8 via ppp0
01500 deny ip from any to 0.0.0.0/8 via ed0
01600 deny ip from any to 169.254.0.0/16 via ppp0
01700 deny log logamount 300 ip from any to 169.254.0.0/16 via ed0
01800 deny ip from any to 192.0.2.0/24 via ppp0
01900 deny ip from any to 192.0.2.0/24 via ed0
02000 deny ip from any to 224.0.0.0/4 via ppp0
02100 deny ip from any to 224.0.0.0/4 via ppp0
02200 deny ip from any to 240.0.0.0/4 via ppp0
02300 deny ip from any to 240.0.0.0/4 via ed0
02400 deny ip from 10.0.0.0/8 to any via ppp0
02500 deny ip from 10.0.0.0/8 to any via ed0
02600 deny ip from 172.16.0.0/12 to any via ppp0
02700 deny ip from 172.16.0.0/12 to any via ed0
02800 deny ip from 192.168.0.0/16 to any via ppp0
02900 deny ip from 192.168.0.0/16 to any via ed0
03000 deny ip from 0.0.0.0/8 to any via ppp0
03100 deny ip from 0.0.0.0/8 to any via ed0
03200 deny ip from 169.254.0.0/16 to any via ppp0
03300 deny ip from 169.254.0.0/16 to any via ed0
03400 deny ip from 192.0.2.0/24 to any via ppp0
03500 deny ip from 192.0.2.0/24 to any via ed0
03600 deny ip from 224.0.0.0/4 to any via ppp0
03700 deny ip from 224.0.0.0/4 to any via ed0
03800 deny ip from 240.0.0.0/4 to any via ppp0
03900 deny ip from 240.0.0.0/4 to any via ppp0
04000 allow tcp from any to any established
04100 allow ip from any to any frag
04200 allow tcp from any to 195.242.23.43 22,25,110,113 setup
04300 allow tcp from any to 213.33.248.2 22,25,110,113 setup
04400 allow tcp from any to 195.242.23.43 1024-65535
04500 allow tcp from any to 213.33.248.2 1024-65535
04600 allow udp from any to 195.242.23.43 1024-65535
04700 allow udp from any to 213.33.248.2 1024-65535
04800 allow tcp from any to 195.242.23.43 53 setup
04900 allow tcp from any to 213.33.248.2 53 setup
05000 allow udp from any to 195.242.23.43 53
05100 allow udp from any to 213.33.248.2 53
05200 allow udp from 195.242.23.43 53 to any
05300 allow udp from 213.33.248.2 53 to any
05400 allow tcp from any to 213.33.248.2 80 setup
05500 deny log logamount 300 tcp from any to any in recv ppp0 setup
05600 deny log logamount 300 tcp from any to any in recv ed0 setup
05700 allow tcp from any to any setup
05800 allow udp from any 53 to 195.242.23.43
05900 allow udp from any 53 to 213.33.248.2
06000 allow udp from 195.242.23.43 to any 53
06100 allow udp from 213.33.248.2 to any 53
06200 allow udp from any 123 to 195.242.23.43
06300 allow udp from any 123 to 213.33.248.2
06400 allow udp from 195.242.23.43 to any 123
06500 allow udp from 213.33.248.2 to any 123
65535 allow ip from any to any
> тогда сможем что-то определить ближе к телу.
--
Eduard V. Goroshko [eddie@systserv.spb.su]
The chief of informational-managing systems department
System Service Inc. +7 (812) 103-00-61
--- ifmail v.2.15dev5
* Origin: System Service Inc. (2:5020/400)
Вернуться к списку тем, сортированных по: возрастание даты уменьшение даты тема автор
|
